aws-iam-ls 0.0.0

package/src/data/servicereference/services/network-firewall.json

@@ -0,0 +1 @@
+{"name":"network-firewall","actions":{"AcceptNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to accept pending Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"AssociateAvailabilityZones":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to associate availability zones to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"AssociateFirewallPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"}],"description":"Grants permission to create an association between a firewall policy and a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true}]},"AssociateSubnets":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to associate VPC subnets to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"AttachRuleGroupsToProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to attach proxy rule groups to a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":true}]},"CreateFirewall":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"}],"description":"Grants permission to create an AWS Network Firewall firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateFirewallPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to create an AWS Network Firewall firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}]},"CreateProxy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Proxy"},{"name":"ProxyConfiguration"}],"description":"Grants permission to create an AWS Network Firewall proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true},{"name":"ProxyConfiguration","required":true}],"dependentActions":["ec2:AttachApplianceToNatGateway"]},"CreateProxyConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":false}]},"CreateProxyRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"CreateProxyRules":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to add proxy rules to a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"CreateRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to create an AWS Network Firewall rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"CreateTLSInspectionConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to create an AWS Network Firewall tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateVpcEndpointAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to create an AWS Network Firewall vpc endpoint association","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true},{"name":"VpcEndpointAssociation","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"DeleteFirewall":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to delete a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"DeleteFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"}],"description":"Grants permission to delete a firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true}]},"DeleteNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to delete Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"DeleteProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to delete a proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true}],"dependentActions":["ec2:DetachApplianceFromNatGateway"]},"DeleteProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to delete a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"DeleteProxyRuleGroup":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to delete a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"DeleteProxyRules":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to remove proxy rules from a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to delete a resource policy for a firewall policy or rule group or firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DeleteRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to delete a rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":true},{"name":"StatelessRuleGroup","required":true}]},"DeleteTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to delete a tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}]},"DeleteVpcEndpointAssociation":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to delete a vpc endpoint association","accessLevel":"Write","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}]},"DescribeFirewall":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the data objects that define a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"DescribeFirewallMetadata":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the high-level information about a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"DescribeFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the data objects that define a firewall policy","accessLevel":"Read","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}]},"DescribeFlowOperation":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to describe a flow operation performed on a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"DescribeLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to describe the logging configuration of a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}],"dependentActions":["logs:GetLogDelivery","logs:ListLogDeliveries"]},"DescribeProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to retrieve the data objects that define a proxy","accessLevel":"Read","resourceTypes":[{"name":"Proxy","required":true}]},"DescribeProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to retrieve the data objects that define a proxy configuration","accessLevel":"Read","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"DescribeProxyRule":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a proxy rule","accessLevel":"Read","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"DescribeProxyRuleGroup":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a proxy rule group","accessLevel":"Read","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"DescribeResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to describe a resource policy for a firewall policy or rule group or firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DescribeRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the data objects that define a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DescribeRuleGroupMetadata":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the high-level information about a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DescribeRuleGroupSummary":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to retrieve the summary information about a rule group","accessLevel":"Read","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"DescribeTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the data objects that define a tls inspection configuration","accessLevel":"Read","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}]},"DescribeVpcEndpointAssociation":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the data objects that define a vpc endpoint association","accessLevel":"Read","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}]},"DetachRuleGroupsFromProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"}],"description":"Grants permission to detach proxy rule groups from a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true},{"name":"ProxyRuleGroup","required":true}]},"DisassociateAvailabilityZones":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to disassociate availability zones to a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"DisassociateSubnets":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to disassociate VPC subnets from a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"GetAnalysisReportResults":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve analysis report results of a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"ListAnalysisReports":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list firewall analysis reports","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}]},"ListFirewallPolicies":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"}],"description":"Grants permission to retrieve the metadata for firewall policies","accessLevel":"List","resourceTypes":[{"name":"FirewallPolicy","required":true}]},"ListFirewalls":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to retrieve the metadata for firewalls","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}]},"ListFlowOperationResults":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list results from a flow operation performed on a firewall","accessLevel":"Read","resourceTypes":[{"name":"Firewall","required":true}]},"ListFlowOperations":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to list flow operations performed on a firewall","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true}]},"ListProxies":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to retrieve the metadata for proxies","accessLevel":"List","resourceTypes":[{"name":"Proxy","required":true}]},"ListProxyConfigurations":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to retrieve the metadata for proxy configurations","accessLevel":"List","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"ListProxyRuleGroups":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to retrieve the metadata for proxy rule groups","accessLevel":"List","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"ListRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the metadata for rule groups","accessLevel":"List","resourceTypes":[]},"ListTLSInspectionConfigurations":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to retrieve the metadata for tls inspection configurations","accessLevel":"List","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the tags for a resource","accessLevel":"List","resourceTypes":[{"name":"Firewall","required":true},{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}]},"ListVpcEndpointAssociations":{"conditionKeys":[],"resources":[{"name":"VpcEndpointAssociation"}],"description":"Grants permission to retrieve the metadata for vpc endpoint associations","accessLevel":"List","resourceTypes":[{"name":"VpcEndpointAssociation","required":true}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to put a resource policy for a firewall policy or rule group or firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"RejectNetworkFirewallTransitGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to reject pending Network Firewall attachments on a transit gateway","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"StartAnalysisReport":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start an analysis report on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"StartFlowCapture":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start capture operation on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"StartFlowFlush":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to start flush operation on a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"Proxy"},{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to attach tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"Proxy","required":false},{"name":"ProxyConfiguration","required":false},{"name":"ProxyRuleGroup","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Firewall"},{"name":"FirewallPolicy"},{"name":"Proxy"},{"name":"ProxyConfiguration"},{"name":"ProxyRuleGroup"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"},{"name":"VpcEndpointAssociation"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Firewall","required":false},{"name":"FirewallPolicy","required":false},{"name":"Proxy","required":false},{"name":"ProxyConfiguration","required":false},{"name":"ProxyRuleGroup","required":false},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false},{"name":"VpcEndpointAssociation","required":false}]},"UpdateAvailabilityZoneChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove availability zone change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallAnalysisSettings":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify firewall analysis settings of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallDeleteProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove delete protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallDescription":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the description for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallEncryptionConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the encryption configuration of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateFirewallPolicy":{"conditionKeys":[],"resources":[{"name":"FirewallPolicy"},{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"},{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to modify a firewall policy","accessLevel":"Write","resourceTypes":[{"name":"FirewallPolicy","required":true},{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false},{"name":"TLSInspectionConfiguration","required":false}]},"UpdateFirewallPolicyChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove firewall policy change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to modify the logging configuration of a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateProxy":{"conditionKeys":[],"resources":[{"name":"Proxy"}],"description":"Grants permission to modify a proxy","accessLevel":"Write","resourceTypes":[{"name":"Proxy","required":true}]},"UpdateProxyConfiguration":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to modify a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"UpdateProxyRule":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to update an existing proxy rule on a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"UpdateProxyRuleGroupPriorities":{"conditionKeys":[],"resources":[{"name":"ProxyConfiguration"}],"description":"Grants permission to modify rule group priorities on a proxy configuration","accessLevel":"Write","resourceTypes":[{"name":"ProxyConfiguration","required":true}]},"UpdateProxyRulePriorities":{"conditionKeys":[],"resources":[{"name":"ProxyRuleGroup"}],"description":"Grants permission to update proxy rule priorities within a proxy rule group","accessLevel":"Write","resourceTypes":[{"name":"ProxyRuleGroup","required":true}]},"UpdateRuleGroup":{"conditionKeys":[],"resources":[{"name":"StatefulRuleGroup"},{"name":"StatelessRuleGroup"}],"description":"Grants permission to modify a rule group","accessLevel":"Write","resourceTypes":[{"name":"StatefulRuleGroup","required":false},{"name":"StatelessRuleGroup","required":false}]},"UpdateSubnetChangeProtection":{"conditionKeys":[],"resources":[{"name":"Firewall"}],"description":"Grants permission to add or remove subnet change protection for a firewall","accessLevel":"Write","resourceTypes":[{"name":"Firewall","required":true}]},"UpdateTLSInspectionConfiguration":{"conditionKeys":[],"resources":[{"name":"TLSInspectionConfiguration"}],"description":"Grants permission to modify a tls inspection configuration","accessLevel":"Write","resourceTypes":[{"name":"TLSInspectionConfiguration","required":true}]}},"resources":[{"name":"Firewall","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:firewall/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"FirewallPolicy","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Proxy","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ProxyConfiguration","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ProxyRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"StatefulRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"StatelessRuleGroup","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TLSInspectionConfiguration","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"VpcEndpointAssociation","arnFormats":["arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of mandatory tags in the request"}}}

package/src/data/servicereference/services/network-security-director.json

@@ -0,0 +1 @@
+{"name":"network-security-director","actions":{"GetFinding":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a finding","accessLevel":"Read","resourceTypes":[]},"GetResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to get a resource","accessLevel":"Read","resourceTypes":[]},"ListAccountSummaries":{"conditionKeys":[],"resources":[],"description":"Grants permission to list account summaries for an account","accessLevel":"List","resourceTypes":[]},"ListFindings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list findings","accessLevel":"List","resourceTypes":[]},"ListInsights":{"conditionKeys":[],"resources":[],"description":"Grants permission to list insights about the latest network security scan","accessLevel":"List","resourceTypes":[]},"ListRemediations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list remediations for a finding","accessLevel":"List","resourceTypes":[]},"ListResources":{"conditionKeys":[],"resources":[],"description":"Grants permission to list resources","accessLevel":"List","resourceTypes":[]},"UpdateFinding":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the status of a finding","accessLevel":"Write","resourceTypes":[]}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/networkflowmonitor.json

@@ -0,0 +1 @@
+{"name":"networkflowmonitor","actions":{"CreateMonitor":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"monitor"}],"description":"Grants permission to create a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"CreateScope":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a scope","accessLevel":"Write","resourceTypes":[]},"DeleteMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to delete a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"DeleteScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to delete a scope","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"GetMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get information about a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"GetQueryResultsMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get the results of a query that retrieves top contributors data for a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"GetQueryResultsWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the results of a query that retrieves top contributors for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"GetQueryResultsWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the results of a query that retrieves top contributors data points for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"GetQueryStatusMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get the status of a query that retrieves top contributors data for a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"GetQueryStatusWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the status of a query that retrieves top contributors for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"GetQueryStatusWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get the status of a query that retrieves top contributors data points for workload insights","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"GetScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to get information about a scope","accessLevel":"Read","resourceTypes":[{"name":"scope","required":true}]},"ListMonitors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all monitors in an account and their statuses","accessLevel":"List","resourceTypes":[]},"ListScopes":{"conditionKeys":[],"resources":[],"description":"Grants permission to get all scopes for an account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}]},"Publish":{"conditionKeys":[],"resources":[],"description":"Grants permission to publish a report","accessLevel":"Write","resourceTypes":[]},"StartQueryMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to start a query for retrieving top contributors data for a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"StartQueryWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to start a query for retrieving top contributors data for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"StartQueryWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to start a query for retrieving top contributors data points for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"StopQueryMonitorTopContributors":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to stop a query for retrieving top contributors data for a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"StopQueryWorkloadInsightsTopContributors":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to stop a query for retrieving top contributors for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"StopQueryWorkloadInsightsTopContributorsData":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to stop a query for retrieving top contributors data points for workload insights","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"monitor"},{"name":"scope"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"monitor","required":false},{"name":"scope","required":false}]},"UpdateMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to update a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"UpdateScope":{"conditionKeys":[],"resources":[{"name":"scope"}],"description":"Grants permission to update a scope","accessLevel":"Write","resourceTypes":[{"name":"scope","required":true}]}},"resources":[{"name":"monitor","arnFormats":["arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/${MonitorName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"scope","arnFormats":["arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/${ScopeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in the request"}}}

package/src/data/servicereference/services/networkmanager-chat.json

@@ -0,0 +1 @@
+{"name":"networkmanager-chat","actions":{"CancelMessageResponse":{"conditionKeys":[],"resources":[],"description":"Grants permission to cancel a response to a message","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteConversation":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"ListConversationMessages":{"conditionKeys":[],"resources":[],"description":"Grants permission to list conversation messages","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"ListConversations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list conversations","accessLevel":"List","resourceTypes":[],"permissionOnly":true},"NotifyConversationIsActive":{"conditionKeys":[],"resources":[],"description":"Grants permission to notify whether there is activity in a conversation","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"SendConversationMessage":{"conditionKeys":[],"resources":[],"description":"Grants permission to send a conversation message","accessLevel":"Write","resourceTypes":[],"permissionOnly":true}},"resources":[],"conditionKeys":{}}

package/src/data/servicereference/services/networkmanager.json

@@ -0,0 +1 @@
+{"name":"networkmanager","actions":{"AcceptAttachment":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to accept creation of an attachment between a source and destination in a core network","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true}],"dependentActions":["ec2:DescribeRegions"]},"AssociateConnectPeer":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"global-network"}],"description":"Grants permission to associate a Connect Peer","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"global-network","required":true}]},"AssociateCustomerGateway":{"conditionKeys":["networkmanager:cgwArn"],"resources":[{"name":"device"},{"name":"global-network"},{"name":"link"}],"description":"Grants permission to associate a customer gateway to a device","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"global-network","required":true},{"name":"link","required":false}]},"AssociateLink":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"global-network"},{"name":"link"}],"description":"Grants permission to associate a link to a device","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"global-network","required":true},{"name":"link","required":true}]},"AssociateTransitGatewayConnectPeer":{"conditionKeys":["networkmanager:tgwConnectPeerArn"],"resources":[{"name":"device"},{"name":"global-network"},{"name":"link"}],"description":"Grants permission to associate a transit gateway connect peer to a device","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"global-network","required":true},{"name":"link","required":false}]},"CreateConnectAttachment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"attachment"},{"name":"core-network"}],"description":"Grants permission to create a Connect attachment","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true},{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions","networkmanager:TagResource"]},"CreateConnectPeer":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"attachment"}],"description":"Grants permission to create a Connect Peer connection","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true}],"dependentActions":["ec2:DescribeRegions","networkmanager:TagResource"]},"CreateConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"global-network"}],"description":"Grants permission to create a new connection","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}],"dependentActions":["networkmanager:TagResource"]},"CreateCoreNetwork":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"global-network"}],"description":"Grants permission to create a new core network","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}],"dependentActions":["ec2:DescribeRegions","networkmanager:TagResource"]},"CreateCoreNetworkPrefixListAssociation":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to create a prefix list core network association","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}]},"CreateDevice":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"global-network"}],"description":"Grants permission to create a new device","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}],"dependentActions":["networkmanager:TagResource"]},"CreateDirectConnectGatewayAttachment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","networkmanager:directConnectGatewayArn","networkmanager:edgeLocations"],"resources":[{"name":"core-network"}],"description":"Grants permission to create a Direct Connect gateway attachment","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions","networkmanager:TagResource"]},"CreateGlobalNetwork":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new global network","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","networkmanager:TagResource"]},"CreateLink":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"global-network"},{"name":"site"}],"description":"Grants permission to create a new link","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true},{"name":"site","required":false}],"dependentActions":["networkmanager:TagResource"]},"CreateSite":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"global-network"}],"description":"Grants permission to create a new site","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}],"dependentActions":["networkmanager:TagResource"]},"CreateSiteToSiteVpnAttachment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","networkmanager:vpnConnectionArn"],"resources":[{"name":"core-network"}],"description":"Grants permission to create a site-to-site VPN attachment","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions","networkmanager:TagResource"]},"CreateTransitGatewayPeering":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","networkmanager:tgwArn"],"resources":[{"name":"core-network"}],"description":"Grants permission to create a Transit Gateway peering","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions","networkmanager:TagResource"]},"CreateTransitGatewayRouteTableAttachment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","networkmanager:tgwRtbArn"],"resources":[{"name":"peering"}],"description":"Grants permission to create a TGW RTB attachment","accessLevel":"Write","resourceTypes":[{"name":"peering","required":true}],"dependentActions":["ec2:DescribeRegions","networkmanager:TagResource"]},"CreateVpcAttachment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","networkmanager:subnetArns","networkmanager:vpcArn"],"resources":[{"name":"core-network"}],"description":"Grants permission to create a VPC attachment","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions","networkmanager:TagResource"]},"DeleteAttachment":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to delete an attachment","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true}],"dependentActions":["ec2:DescribeRegions"]},"DeleteConnectPeer":{"conditionKeys":[],"resources":[{"name":"connect-peer"}],"description":"Grants permission to delete a Connect Peer","accessLevel":"Write","resourceTypes":[{"name":"connect-peer","required":true}],"dependentActions":["ec2:DescribeRegions"]},"DeleteConnection":{"conditionKeys":[],"resources":[{"name":"connection"},{"name":"global-network"}],"description":"Grants permission to delete a connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true},{"name":"global-network","required":true}]},"DeleteCoreNetwork":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to delete a core network","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions"]},"DeleteCoreNetworkPolicyVersion":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to delete the core network policy version","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}]},"DeleteCoreNetworkPrefixListAssociation":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to delete a prefix list core network association","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}]},"DeleteDevice":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"global-network"}],"description":"Grants permission to delete a device","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"global-network","required":true}]},"DeleteGlobalNetwork":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to delete a global network","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"DeleteLink":{"conditionKeys":[],"resources":[{"name":"global-network"},{"name":"link"}],"description":"Grants permission to delete a link","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true},{"name":"link","required":true}]},"DeletePeering":{"conditionKeys":[],"resources":[{"name":"peering"}],"description":"Grants permission to delete a peering","accessLevel":"Write","resourceTypes":[{"name":"peering","required":true}],"dependentActions":["ec2:DescribeRegions"]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to delete a resource","accessLevel":"Permissions management","resourceTypes":[{"name":"core-network","required":true}]},"DeleteSite":{"conditionKeys":[],"resources":[{"name":"global-network"},{"name":"site"}],"description":"Grants permission to delete a site","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true},{"name":"site","required":true}]},"DeregisterTransitGateway":{"conditionKeys":["networkmanager:tgwArn"],"resources":[{"name":"global-network"}],"description":"Grants permission to deregister a transit gateway from a global network","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"DescribeGlobalNetworks":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to describe global networks","accessLevel":"List","resourceTypes":[{"name":"global-network","required":false}]},"DisassociateConnectPeer":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to disassociate a Connect Peer","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"DisassociateCustomerGateway":{"conditionKeys":["networkmanager:cgwArn"],"resources":[{"name":"global-network"}],"description":"Grants permission to disassociate a customer gateway from a device","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"DisassociateLink":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"global-network"},{"name":"link"}],"description":"Grants permission to disassociate a link from a device","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"global-network","required":true},{"name":"link","required":true}]},"DisassociateTransitGatewayConnectPeer":{"conditionKeys":["networkmanager:tgwConnectPeerArn"],"resources":[{"name":"global-network"}],"description":"Grants permission to disassociate a transit gateway connect peer from a device","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"ExecuteCoreNetworkChangeSet":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to apply changes to the core network","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions"]},"GetConnectAttachment":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to retrieve a Connect attachment","accessLevel":"Read","resourceTypes":[{"name":"attachment","required":true}]},"GetConnectPeer":{"conditionKeys":[],"resources":[{"name":"connect-peer"}],"description":"Grants permission to retrieve a Connect Peer","accessLevel":"Read","resourceTypes":[{"name":"connect-peer","required":true}]},"GetConnectPeerAssociations":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to describe Connect Peer associations","accessLevel":"Read","resourceTypes":[{"name":"global-network","required":true}]},"GetConnections":{"conditionKeys":[],"resources":[{"name":"connection"},{"name":"global-network"}],"description":"Grants permission to describe connections","accessLevel":"List","resourceTypes":[{"name":"global-network","required":true},{"name":"connection","required":false}]},"GetCoreNetwork":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to retrieve a core network","accessLevel":"Read","resourceTypes":[{"name":"core-network","required":true}]},"GetCoreNetworkChangeEvents":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to retrieve a list of core network change events","accessLevel":"Read","resourceTypes":[{"name":"core-network","required":true}]},"GetCoreNetworkChangeSet":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to retrieve a list of core network change sets","accessLevel":"Read","resourceTypes":[{"name":"core-network","required":true}]},"GetCoreNetworkPolicy":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to retrieve core network policy","accessLevel":"Read","resourceTypes":[{"name":"core-network","required":true}]},"GetCustomerGatewayAssociations":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to describe customer gateway associations","accessLevel":"List","resourceTypes":[{"name":"global-network","required":true}]},"GetDevices":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"global-network"}],"description":"Grants permission to describe devices","accessLevel":"List","resourceTypes":[{"name":"global-network","required":true},{"name":"device","required":false}]},"GetDirectConnectGatewayAttachment":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to retrieve a Direct Connect gateway attachment","accessLevel":"Read","resourceTypes":[{"name":"attachment","required":true}]},"GetLinkAssociations":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"global-network"},{"name":"link"}],"description":"Grants permission to describe link associations","accessLevel":"List","resourceTypes":[{"name":"global-network","required":true},{"name":"device","required":false},{"name":"link","required":false}]},"GetLinks":{"conditionKeys":[],"resources":[{"name":"global-network"},{"name":"link"}],"description":"Grants permission to describe links","accessLevel":"List","resourceTypes":[{"name":"global-network","required":true},{"name":"link","required":false}]},"GetNetworkResourceCounts":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to return the number of resources for a global network grouped by type","accessLevel":"Read","resourceTypes":[{"name":"global-network","required":true}]},"GetNetworkResourceRelationships":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to retrieve related resources for a resource within the global network","accessLevel":"Read","resourceTypes":[{"name":"global-network","required":true}]},"GetNetworkResources":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to retrieve a global network resource","accessLevel":"Read","resourceTypes":[{"name":"global-network","required":true}]},"GetNetworkRoutes":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to retrieve routes for a route table within the global network","accessLevel":"Read","resourceTypes":[{"name":"global-network","required":true}]},"GetNetworkTelemetry":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to retrieve network telemetry objects for the global network","accessLevel":"Read","resourceTypes":[{"name":"global-network","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to retrieve a resource policy","accessLevel":"Read","resourceTypes":[{"name":"core-network","required":true}]},"GetRouteAnalysis":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to retrieve a route analysis configuration and result","accessLevel":"Read","resourceTypes":[{"name":"global-network","required":true}]},"GetSiteToSiteVpnAttachment":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to retrieve a site-to-site VPN attachment","accessLevel":"Read","resourceTypes":[{"name":"attachment","required":true}]},"GetSites":{"conditionKeys":[],"resources":[{"name":"global-network"},{"name":"site"}],"description":"Grants permission to describe global networks","accessLevel":"List","resourceTypes":[{"name":"global-network","required":true},{"name":"site","required":false}]},"GetTransitGatewayConnectPeerAssociations":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to describe transit gateway connect peer associations","accessLevel":"List","resourceTypes":[{"name":"global-network","required":true}]},"GetTransitGatewayPeering":{"conditionKeys":[],"resources":[{"name":"peering"}],"description":"Grants permission to retrieve a Transit Gateway peering","accessLevel":"Read","resourceTypes":[{"name":"peering","required":true}]},"GetTransitGatewayRegistrations":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to describe transit gateway registrations","accessLevel":"List","resourceTypes":[{"name":"global-network","required":true}]},"GetTransitGatewayRouteTableAttachment":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to retrieve a TGW RTB attachment","accessLevel":"Read","resourceTypes":[{"name":"attachment","required":true}]},"GetVpcAttachment":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to retrieve a VPC attachment","accessLevel":"Read","resourceTypes":[{"name":"attachment","required":true}]},"ListAttachmentRoutingPolicyAssociations":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to list all routing policies associated to core network attachments","accessLevel":"List","resourceTypes":[{"name":"core-network","required":true}]},"ListAttachments":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to describe attachments","accessLevel":"List","resourceTypes":[{"name":"attachment","required":true}]},"ListConnectPeers":{"conditionKeys":[],"resources":[{"name":"connect-peer"}],"description":"Grants permission to describe Connect Peers","accessLevel":"List","resourceTypes":[{"name":"connect-peer","required":true}]},"ListCoreNetworkPolicyVersions":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to list core network policy versions","accessLevel":"List","resourceTypes":[{"name":"core-network","required":true}]},"ListCoreNetworkPrefixListAssociations":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to list core network prefix list associaitons","accessLevel":"List","resourceTypes":[{"name":"core-network","required":true}]},"ListCoreNetworkRoutingInformation":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to list core network routing information","accessLevel":"List","resourceTypes":[{"name":"core-network","required":true}]},"ListCoreNetworks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list core networks","accessLevel":"List","resourceTypes":[]},"ListOrganizationServiceAccessStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to list organization service access status","accessLevel":"List","resourceTypes":[]},"ListPeerings":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe peerings","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"attachment"},{"name":"connect-peer"},{"name":"connection"},{"name":"core-network"},{"name":"device"},{"name":"global-network"},{"name":"link"},{"name":"peering"},{"name":"site"}],"description":"Grants permission to list tags for a Network Manager resource","accessLevel":"Read","resourceTypes":[{"name":"attachment","required":false},{"name":"connect-peer","required":false},{"name":"connection","required":false},{"name":"core-network","required":false},{"name":"device","required":false},{"name":"global-network","required":false},{"name":"link","required":false},{"name":"peering","required":false},{"name":"site","required":false}]},"PutAttachmentRoutingPolicyLabel":{"conditionKeys":[],"resources":[{"name":"attachment"},{"name":"core-network"}],"description":"Grants permission to put an attachment routing policy label","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true},{"name":"core-network","required":true}]},"PutCoreNetworkPolicy":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to create a core network policy","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions"]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to create or update a resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"core-network","required":true}]},"RegisterTransitGateway":{"conditionKeys":["networkmanager:tgwArn"],"resources":[{"name":"global-network"}],"description":"Grants permission to register a transit gateway to a global network","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"RejectAttachment":{"conditionKeys":[],"resources":[{"name":"attachment"}],"description":"Grants permission to reject attachment request","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true}]},"RemoveAttachmentRoutingPolicyLabel":{"conditionKeys":[],"resources":[{"name":"attachment"},{"name":"core-network"}],"description":"Grants permission to remove an attachment routing policy label","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true},{"name":"core-network","required":true}]},"RestoreCoreNetworkPolicyVersion":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to restore the core network policy to a previous version","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}],"dependentActions":["ec2:DescribeRegions"]},"StartOrganizationServiceAccessUpdate":{"conditionKeys":[],"resources":[],"description":"Grants permission to start organization service access update","accessLevel":"Permissions management","resourceTypes":[]},"StartRouteAnalysis":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to start a route analysis and stores analysis configuration","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"attachment"},{"name":"connect-peer"},{"name":"connection"},{"name":"core-network"},{"name":"device"},{"name":"global-network"},{"name":"link"},{"name":"peering"},{"name":"site"}],"description":"Grants permission to tag a Network Manager resource","accessLevel":"Tagging","resourceTypes":[{"name":"attachment","required":false},{"name":"connect-peer","required":false},{"name":"connection","required":false},{"name":"core-network","required":false},{"name":"device","required":false},{"name":"global-network","required":false},{"name":"link","required":false},{"name":"peering","required":false},{"name":"site","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"attachment"},{"name":"connect-peer"},{"name":"connection"},{"name":"core-network"},{"name":"device"},{"name":"global-network"},{"name":"link"},{"name":"peering"},{"name":"site"}],"description":"Grants permission to untag a Network Manager resource","accessLevel":"Tagging","resourceTypes":[{"name":"attachment","required":false},{"name":"connect-peer","required":false},{"name":"connection","required":false},{"name":"core-network","required":false},{"name":"device","required":false},{"name":"global-network","required":false},{"name":"link","required":false},{"name":"peering","required":false},{"name":"site","required":false}]},"UpdateConnection":{"conditionKeys":[],"resources":[{"name":"connection"},{"name":"global-network"}],"description":"Grants permission to update a connection","accessLevel":"Write","resourceTypes":[{"name":"connection","required":true},{"name":"global-network","required":true}]},"UpdateCoreNetwork":{"conditionKeys":[],"resources":[{"name":"core-network"}],"description":"Grants permission to update a core network","accessLevel":"Write","resourceTypes":[{"name":"core-network","required":true}]},"UpdateDevice":{"conditionKeys":[],"resources":[{"name":"device"},{"name":"global-network"}],"description":"Grants permission to update a device","accessLevel":"Write","resourceTypes":[{"name":"device","required":true},{"name":"global-network","required":true}]},"UpdateDirectConnectGatewayAttachment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","networkmanager:edgeLocations"],"resources":[{"name":"attachment"}],"description":"Grants permission to update a Direct Connect gateway attachment","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true}],"dependentActions":["ec2:DescribeRegions"]},"UpdateGlobalNetwork":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to update a global network","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"UpdateLink":{"conditionKeys":[],"resources":[{"name":"global-network"},{"name":"link"}],"description":"Grants permission to update a link","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true},{"name":"link","required":true}]},"UpdateNetworkResourceMetadata":{"conditionKeys":[],"resources":[{"name":"global-network"}],"description":"Grants permission to add or update metadata key/value pairs on network resource","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true}]},"UpdateSite":{"conditionKeys":[],"resources":[{"name":"global-network"},{"name":"site"}],"description":"Grants permission to update a site","accessLevel":"Write","resourceTypes":[{"name":"global-network","required":true},{"name":"site","required":true}]},"UpdateVpcAttachment":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","networkmanager:subnetArns"],"resources":[{"name":"attachment"}],"description":"Grants permission to update a VPC attachment","accessLevel":"Write","resourceTypes":[{"name":"attachment","required":true}],"dependentActions":["ec2:DescribeRegions"]}},"resources":[{"name":"attachment","arnFormats":["arn:${Partition}:networkmanager::${Account}:attachment/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"connect-peer","arnFormats":["arn:${Partition}:networkmanager::${Account}:connect-peer/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"connection","arnFormats":["arn:${Partition}:networkmanager::${Account}:connection/${GlobalNetworkId}/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"core-network","arnFormats":["arn:${Partition}:networkmanager::${Account}:core-network/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"device","arnFormats":["arn:${Partition}:networkmanager::${Account}:device/${GlobalNetworkId}/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"global-network","arnFormats":["arn:${Partition}:networkmanager::${Account}:global-network/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"link","arnFormats":["arn:${Partition}:networkmanager::${Account}:link/${GlobalNetworkId}/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"peering","arnFormats":["arn:${Partition}:networkmanager::${Account}:peering/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"site","arnFormats":["arn:${Partition}:networkmanager::${Account}:site/${GlobalNetworkId}/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"networkmanager:cgwArn":{"types":["ARN"],"description":"Filters access by which customer gateways can be associated or disassociated"},"networkmanager:directConnectGatewayArn":{"types":["ARN"],"description":"Filters access by which Direct Connect gateway can be used to a create/update attachment"},"networkmanager:edgeLocations":{"types":["ArrayOfString"],"description":"Filters access by which edge locations can be added or removed from a Direct Connect gateway attachment"},"networkmanager:subnetArns":{"types":["ArrayOfARN"],"description":"Filters access by which VPC subnets can be added or removed from a VPC attachment"},"networkmanager:tgwArn":{"types":["ARN"],"description":"Filters access by which transit gateways can be registered, deregistered, or peered"},"networkmanager:tgwConnectPeerArn":{"types":["ARN"],"description":"Filters access by which transit gateway connect peers can be associated or disassociated"},"networkmanager:tgwRtbArn":{"types":["ARN"],"description":"Filters access by which Transit Gateway Route Table can be used to create an attachment"},"networkmanager:vpcArn":{"types":["ARN"],"description":"Filters access by which VPC can be used to a create/update attachment"},"networkmanager:vpnConnectionArn":{"types":["ARN"],"description":"Filters access by which Site-to-Site VPN can be used to a create/update attachment"}}}

package/src/data/servicereference/services/networkmonitor.json

@@ -0,0 +1 @@
+{"name":"networkmonitor","actions":{"CreateMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to create a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"CreateProbe":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a probe","accessLevel":"Write","resourceTypes":[]},"DeleteMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to delete a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"DeleteProbe":{"conditionKeys":[],"resources":[{"name":"probe"}],"description":"Grants permission to delete a probe","accessLevel":"Write","resourceTypes":[{"name":"probe","required":true}]},"GetMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to get information about a monitor","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":true}]},"GetProbe":{"conditionKeys":[],"resources":[{"name":"probe"}],"description":"Grants permission to get information about a probe","accessLevel":"Read","resourceTypes":[{"name":"probe","required":true}]},"ListMonitors":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all monitors in an account and their statuses","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"monitor"},{"name":"probe"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"monitor","required":false},{"name":"probe","required":false}]},"TagResource":{"conditionKeys":[],"resources":[{"name":"monitor"},{"name":"probe"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"monitor","required":false},{"name":"probe","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"monitor"},{"name":"probe"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"monitor","required":false},{"name":"probe","required":false}]},"UpdateMonitor":{"conditionKeys":[],"resources":[{"name":"monitor"}],"description":"Grants permission to update a monitor","accessLevel":"Write","resourceTypes":[{"name":"monitor","required":true}]},"UpdateProbe":{"conditionKeys":[],"resources":[{"name":"probe"}],"description":"Grants permission to update a probe","accessLevel":"Write","resourceTypes":[{"name":"probe","required":true}]}},"resources":[{"name":"monitor","arnFormats":["arn:${Partition}:networkmonitor:${Region}:${Account}:monitor/${MonitorName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"probe","arnFormats":["arn:${Partition}:networkmonitor:${Region}:${Account}:probe/${ProbeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys in the request"}}}

package/src/data/servicereference/services/nimble.json

@@ -0,0 +1 @@
+{"name":"nimble","actions":{"AcceptEulas":{"conditionKeys":[],"resources":[{"name":"eula"}],"description":"Grants permission to accept EULAs","accessLevel":"Write","resourceTypes":[{"name":"eula","required":true}]},"CreateLaunchProfile":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"studio"}],"description":"Grants permission to create a launch profile","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:DescribeNatGateways","ec2:DescribeNetworkAcls","ec2:DescribeRouteTables","ec2:DescribeSubnets","ec2:DescribeVpcEndpoints","ec2:RunInstances"]},"CreateStreamingImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"studio"}],"description":"Grants permission to create a streaming image","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"dependentActions":["ec2:DescribeImages","ec2:DescribeSnapshots","ec2:ModifyInstanceAttribute","ec2:ModifySnapshotAttribute","ec2:RegisterImage"]},"CreateStreamingSession":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"launch-profile"}],"description":"Grants permission to create a streaming session","accessLevel":"Write","resourceTypes":[{"name":"launch-profile","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:CreateNetworkInterfacePermission","nimble:GetLaunchProfile","nimble:GetLaunchProfileInitialization","nimble:ListEulaAcceptances"]},"CreateStreamingSessionStream":{"conditionKeys":["nimble:requesterPrincipalId"],"resources":[{"name":"streaming-session"}],"description":"Grants permission to create a StreamingSessionStream","accessLevel":"Write","resourceTypes":[{"name":"streaming-session","required":true}]},"CreateStudio":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"studio"}],"description":"Grants permission to create a studio","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"dependentActions":["iam:PassRole","sso:CreateManagedApplicationInstance"]},"CreateStudioComponent":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"studio"}],"description":"Grants permission to create a studio component. A studio component designates a network resource to which a launch profile will provide access","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"dependentActions":["ds:AuthorizeApplication","ds:DescribeDirectories","ec2:DescribeSecurityGroups","fsx:DescribeFileSystems","iam:PassRole"]},"DeleteLaunchProfile":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to delete a launch profile","accessLevel":"Write","resourceTypes":[{"name":"launch-profile","required":true}]},"DeleteLaunchProfileMember":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to delete a launch profile member","accessLevel":"Write","resourceTypes":[{"name":"launch-profile","required":true}]},"DeleteStreamingImage":{"conditionKeys":[],"resources":[{"name":"streaming-image"}],"description":"Grants permission to delete a streaming image","accessLevel":"Write","resourceTypes":[{"name":"streaming-image","required":true}],"dependentActions":["ec2:DeleteSnapshot","ec2:DeregisterImage","ec2:ModifyInstanceAttribute","ec2:ModifySnapshotAttribute"]},"DeleteStreamingSession":{"conditionKeys":["nimble:requesterPrincipalId"],"resources":[{"name":"streaming-session"}],"description":"Grants permission to delete a streaming session","accessLevel":"Write","resourceTypes":[{"name":"streaming-session","required":true}],"dependentActions":["ec2:DeleteNetworkInterface"]},"DeleteStudio":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to delete a studio","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"dependentActions":["sso:DeleteManagedApplicationInstance"]},"DeleteStudioComponent":{"conditionKeys":[],"resources":[{"name":"studio-component"}],"description":"Grants permission to delete a studio component","accessLevel":"Write","resourceTypes":[{"name":"studio-component","required":true}],"dependentActions":["ds:UnauthorizeApplication"]},"DeleteStudioMember":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to delete a studio member","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}]},"GetEula":{"conditionKeys":[],"resources":[{"name":"eula"}],"description":"Grants permission to get a EULA","accessLevel":"Read","resourceTypes":[{"name":"eula","required":true}]},"GetFeatureMap":{"conditionKeys":[],"resources":[],"description":"Grants permission to allow Nimble Studio portal to show the appropriate features for this account","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetLaunchProfile":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to get a launch profile","accessLevel":"Read","resourceTypes":[{"name":"launch-profile","required":true}]},"GetLaunchProfileDetails":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to get a launch profile's details, which includes the summary of studio components and streaming images used by the launch profile","accessLevel":"Read","resourceTypes":[{"name":"launch-profile","required":true}]},"GetLaunchProfileInitialization":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to get a launch profile initialization. A launch profile initialization is a dereferenced version of a launch profile, including attached studio component connection information","accessLevel":"Read","resourceTypes":[{"name":"launch-profile","required":true}],"dependentActions":["ds:DescribeDirectories","ec2:DescribeSecurityGroups","fsx:DescribeFileSystems"]},"GetLaunchProfileMember":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to get a launch profile member","accessLevel":"Read","resourceTypes":[{"name":"launch-profile","required":true}]},"GetStreamingImage":{"conditionKeys":[],"resources":[{"name":"streaming-image"}],"description":"Grants permission to get a streaming image","accessLevel":"Read","resourceTypes":[{"name":"streaming-image","required":true}]},"GetStreamingSession":{"conditionKeys":["nimble:requesterPrincipalId"],"resources":[{"name":"streaming-session"}],"description":"Grants permission to get a streaming session","accessLevel":"Read","resourceTypes":[{"name":"streaming-session","required":true}]},"GetStreamingSessionBackup":{"conditionKeys":["nimble:requesterPrincipalId"],"resources":[{"name":"streaming-session-backup"}],"description":"Grants permission to get a streaming session backup","accessLevel":"Read","resourceTypes":[{"name":"streaming-session-backup","required":true}]},"GetStreamingSessionStream":{"conditionKeys":["nimble:requesterPrincipalId"],"resources":[{"name":"streaming-session"}],"description":"Grants permission to get a streaming session stream","accessLevel":"Read","resourceTypes":[{"name":"streaming-session","required":true}]},"GetStudio":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to get a studio","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"GetStudioComponent":{"conditionKeys":[],"resources":[{"name":"studio-component"}],"description":"Grants permission to get a studio component","accessLevel":"Read","resourceTypes":[{"name":"studio-component","required":true}]},"GetStudioMember":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to get a studio member","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"ListEulaAcceptances":{"conditionKeys":[],"resources":[{"name":"eula-acceptance"}],"description":"Grants permission to list EULA acceptances","accessLevel":"Read","resourceTypes":[{"name":"eula-acceptance","required":true}]},"ListEulas":{"conditionKeys":[],"resources":[{"name":"eula"}],"description":"Grants permission to list EULAs","accessLevel":"Read","resourceTypes":[{"name":"eula","required":true}]},"ListLaunchProfileMembers":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to list launch profile members","accessLevel":"Read","resourceTypes":[{"name":"launch-profile","required":true}]},"ListLaunchProfiles":{"conditionKeys":["nimble:principalId","nimble:requesterPrincipalId"],"resources":[{"name":"studio"}],"description":"Grants permission to list launch profiles","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"ListStreamingImages":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to list streaming images","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"ListStreamingSessionBackups":{"conditionKeys":["nimble:requesterPrincipalId"],"resources":[{"name":"studio"}],"description":"Grants permission to list streaming session backups","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"ListStreamingSessions":{"conditionKeys":["nimble:createdBy","nimble:ownedBy","nimble:requesterPrincipalId"],"resources":[{"name":"studio"}],"description":"Grants permission to list streaming sessions","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"ListStudioComponents":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to list studio components","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"ListStudioMembers":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to list studio members","accessLevel":"Read","resourceTypes":[{"name":"studio","required":true}]},"ListStudios":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all studios","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"launch-profile"},{"name":"streaming-image"},{"name":"streaming-session"},{"name":"streaming-session-backup"},{"name":"studio"},{"name":"studio-component"}],"description":"Grants permission to list all tags on a Nimble Studio resource","accessLevel":"Read","resourceTypes":[{"name":"launch-profile","required":false},{"name":"streaming-image","required":false},{"name":"streaming-session","required":false},{"name":"streaming-session-backup","required":false},{"name":"studio","required":false},{"name":"studio-component","required":false}]},"PutLaunchProfileMembers":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to add/update launch profile members","accessLevel":"Write","resourceTypes":[{"name":"launch-profile","required":true}],"dependentActions":["sso-directory:DescribeUsers"]},"PutStudioLogEvents":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to report metrics and logs for the Nimble Studio portal to monitor application health","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"permissionOnly":true},"PutStudioMembers":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to add/update studio members","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"dependentActions":["sso-directory:DescribeUsers"]},"StartStreamingSession":{"conditionKeys":["nimble:requesterPrincipalId"],"resources":[{"name":"streaming-session"},{"name":"streaming-session-backup"}],"description":"Grants permission to start a streaming session","accessLevel":"Write","resourceTypes":[{"name":"streaming-session","required":true},{"name":"streaming-session-backup","required":false}],"dependentActions":["nimble:GetLaunchProfile","nimble:GetLaunchProfileMember"]},"StartStudioSSOConfigurationRepair":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to repair the studio's AWS IAM Identity Center configuration","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"dependentActions":["sso:CreateManagedApplicationInstance","sso:GetManagedApplicationInstance"]},"StopStreamingSession":{"conditionKeys":["nimble:requesterPrincipalId"],"resources":[{"name":"streaming-session"}],"description":"Grants permission to stop a streaming session","accessLevel":"Write","resourceTypes":[{"name":"streaming-session","required":true}],"dependentActions":["nimble:GetLaunchProfile"]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"launch-profile"},{"name":"streaming-image"},{"name":"streaming-session"},{"name":"streaming-session-backup"},{"name":"studio"},{"name":"studio-component"}],"description":"Grants permission to add or overwrite one or more tags for the specified Nimble Studio resource","accessLevel":"Tagging","resourceTypes":[{"name":"launch-profile","required":false},{"name":"streaming-image","required":false},{"name":"streaming-session","required":false},{"name":"streaming-session-backup","required":false},{"name":"studio","required":false},{"name":"studio-component","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"launch-profile"},{"name":"streaming-image"},{"name":"streaming-session"},{"name":"streaming-session-backup"},{"name":"studio"},{"name":"studio-component"}],"description":"Grants permission to disassociate one or more tags from the specified Nimble Studio resource","accessLevel":"Tagging","resourceTypes":[{"name":"launch-profile","required":false},{"name":"streaming-image","required":false},{"name":"streaming-session","required":false},{"name":"streaming-session-backup","required":false},{"name":"studio","required":false},{"name":"studio-component","required":false}]},"UpdateLaunchProfile":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to update a launch profile","accessLevel":"Write","resourceTypes":[{"name":"launch-profile","required":true}],"dependentActions":["ec2:DescribeNatGateways","ec2:DescribeNetworkAcls","ec2:DescribeRouteTables","ec2:DescribeSubnets","ec2:DescribeVpcEndpoints"]},"UpdateLaunchProfileMember":{"conditionKeys":[],"resources":[{"name":"launch-profile"}],"description":"Grants permission to update a launch profile member","accessLevel":"Write","resourceTypes":[{"name":"launch-profile","required":true}]},"UpdateStreamingImage":{"conditionKeys":[],"resources":[{"name":"streaming-image"}],"description":"Grants permission to update a streaming image","accessLevel":"Write","resourceTypes":[{"name":"streaming-image","required":true}]},"UpdateStudio":{"conditionKeys":[],"resources":[{"name":"studio"}],"description":"Grants permission to update a studio","accessLevel":"Write","resourceTypes":[{"name":"studio","required":true}],"dependentActions":["iam:PassRole"]},"UpdateStudioComponent":{"conditionKeys":[],"resources":[{"name":"studio-component"}],"description":"Grants permission to update a studio component","accessLevel":"Write","resourceTypes":[{"name":"studio-component","required":true}],"dependentActions":["ds:AuthorizeApplication","ds:DescribeDirectories","ec2:DescribeSecurityGroups","fsx:DescribeFileSystems","iam:PassRole"]}},"resources":[{"name":"eula","arnFormats":["arn:${Partition}:nimble:${Region}:${Account}:eula/${EulaId}"],"conditionKeys":[]},{"name":"eula-acceptance","arnFormats":["arn:${Partition}:nimble:${Region}:${Account}:eula-acceptance/${EulaAcceptanceId}"],"conditionKeys":["nimble:studioId"]},{"name":"launch-profile","arnFormats":["arn:${Partition}:nimble:${Region}:${Account}:launch-profile/${LaunchProfileId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","nimble:studioId"]},{"name":"streaming-image","arnFormats":["arn:${Partition}:nimble:${Region}:${Account}:streaming-image/${StreamingImageId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","nimble:studioId"]},{"name":"streaming-session","arnFormats":["arn:${Partition}:nimble:${Region}:${Account}:streaming-session/${StreamingSessionId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","nimble:createdBy","nimble:ownedBy"]},{"name":"streaming-session-backup","arnFormats":["arn:${Partition}:nimble:${Region}:${Account}:streaming-session-backup/${StreamingSessionBackupId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","nimble:ownedBy"]},{"name":"studio","arnFormats":["arn:${Partition}:nimble:${Region}:${Account}:studio/${StudioId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","nimble:studioId"]},{"name":"studio-component","arnFormats":["arn:${Partition}:nimble:${Region}:${Account}:studio-component/${StudioComponentId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","nimble:studioId"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"},"nimble:createdBy":{"types":["String"],"description":"Filters access by the createdBy request parameter or the ID of the creator of the resource"},"nimble:ownedBy":{"types":["String"],"description":"Filters access by the ownedBy request parameter or the ID of the owner of the resource"},"nimble:principalId":{"types":["String"],"description":"Filters access by the principalId request parameter"},"nimble:requesterPrincipalId":{"types":["String"],"description":"Filters access by the ID of the logged in user"},"nimble:studioId":{"types":["ARN"],"description":"Filters access by a specific studio"}}}

package/src/data/servicereference/services/notifications-contacts.json

@@ -0,0 +1 @@
+{"name":"notifications-contacts","actions":{"ActivateEmailContact":{"conditionKeys":[],"resources":[{"name":"EmailContactResource"}],"description":"Grants permission to activate the email contact associated with the given ARN if the provided code is valid","accessLevel":"Write","resourceTypes":[{"name":"EmailContactResource","required":true}]},"CreateEmailContact":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an email contact","accessLevel":"Write","resourceTypes":[]},"DeleteEmailContact":{"conditionKeys":[],"resources":[{"name":"EmailContactResource"}],"description":"Grants permission to delete an email contact associated with the given ARN","accessLevel":"Write","resourceTypes":[{"name":"EmailContactResource","required":true}]},"GetEmailContact":{"conditionKeys":[],"resources":[{"name":"EmailContactResource"}],"description":"Grants permission to get an email contact associated with the given ARN","accessLevel":"Read","resourceTypes":[{"name":"EmailContactResource","required":true}]},"ListEmailContacts":{"conditionKeys":[],"resources":[],"description":"Grants permission to list email contacts","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to get tags for a resource","accessLevel":"Read","resourceTypes":[]},"SendActivationCode":{"conditionKeys":[],"resources":[{"name":"EmailContactResource"}],"description":"Grants permission to send an activation link to the email associated with the given ARN","accessLevel":"Write","resourceTypes":[{"name":"EmailContactResource","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"EmailContactResource"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"EmailContactResource","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"EmailContactResource"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"EmailContactResource","required":true}]}},"resources":[{"name":"EmailContactResource","arnFormats":["arn:${Partition}:notifications-contacts::${Account}:emailcontact/${EmailContactId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}

package/src/data/servicereference/services/notifications.json

@@ -0,0 +1 @@
+{"name":"notifications","actions":{"AssociateChannel":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to associate a new Channel with a particular NotificationConfiguration","accessLevel":"Write","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"AssociateManagedNotificationAccountContact":{"conditionKeys":[],"resources":[{"name":"ManagedNotificationConfiguration"}],"description":"Grants permission to associate an Account contact to a particular Managed Notification Configuration","accessLevel":"Write","resourceTypes":[{"name":"ManagedNotificationConfiguration","required":true}]},"AssociateManagedNotificationAdditionalChannel":{"conditionKeys":[],"resources":[{"name":"ManagedNotificationConfiguration"}],"description":"Grants permission to associate a Channel to a particular Managed Notification Configuration","accessLevel":"Write","resourceTypes":[{"name":"ManagedNotificationConfiguration","required":true}]},"AssociateOrganizationalUnit":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to associate an Organizational Unit to a particular Notification Configuration","accessLevel":"Write","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"CreateEventRule":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new EventRule, associating it with a NotificationConfiguration","accessLevel":"Write","resourceTypes":[]},"CreateNotificationConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a NotificationConfiguration","accessLevel":"Write","resourceTypes":[]},"DeleteEventRule":{"conditionKeys":[],"resources":[{"name":"EventRule"}],"description":"Grants permission to delete an EventRule","accessLevel":"Write","resourceTypes":[{"name":"EventRule","required":true}]},"DeleteNotificationConfiguration":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to delete a NotificationConfiguration","accessLevel":"Write","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"DeregisterNotificationHub":{"conditionKeys":[],"resources":[],"description":"Grants permission to deregister a NotificationHub","accessLevel":"Write","resourceTypes":[]},"DisableNotificationsAccessForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable Service Trust for AWS User Notifications","accessLevel":"Permissions management","resourceTypes":[],"dependentActions":["organizations:DisableAWSServiceAccess"]},"DisassociateChannel":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to remove a Channel from a NotificationConfiguration","accessLevel":"Write","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"DisassociateManagedNotificationAccountContact":{"conditionKeys":[],"resources":[{"name":"ManagedNotificationConfiguration"}],"description":"Grants permission to remove an Account contact from a Managed Notification Configuration","accessLevel":"Write","resourceTypes":[{"name":"ManagedNotificationConfiguration","required":true}]},"DisassociateManagedNotificationAdditionalChannel":{"conditionKeys":[],"resources":[{"name":"ManagedNotificationConfiguration"}],"description":"Grants permission to remove a Channel from a Managed Notification Configuration","accessLevel":"Write","resourceTypes":[{"name":"ManagedNotificationConfiguration","required":true}]},"DisassociateOrganizationalUnit":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to disassociate an Organizational Unit to a particular Notification Configuration","accessLevel":"Write","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"EnableNotificationsAccessForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable Service Trust for AWS User Notifications","accessLevel":"Permissions management","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","organizations:EnableAWSServiceAccess"]},"GetEventRule":{"conditionKeys":[],"resources":[{"name":"EventRule"}],"description":"Grants permission to get an EventRule","accessLevel":"Read","resourceTypes":[{"name":"EventRule","required":true}]},"GetFeatureOptInStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to read the opt-in status of an AWS User Notification Service feature","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"GetManagedNotificationChildEvent":{"conditionKeys":[],"resources":[{"name":"ManagedNotificationChildEvent"}],"description":"Grants permission to get a Managed Notification Child Event","accessLevel":"Read","resourceTypes":[{"name":"ManagedNotificationChildEvent","required":true}]},"GetManagedNotificationConfiguration":{"conditionKeys":[],"resources":[{"name":"ManagedNotificationConfiguration"}],"description":"Grants permission to get a Managed Notification Configuration","accessLevel":"Read","resourceTypes":[{"name":"ManagedNotificationConfiguration","required":true}]},"GetManagedNotificationEvent":{"conditionKeys":[],"resources":[{"name":"ManagedNotificationEvent"}],"description":"Grants permission to get a Managed NotificationEvent","accessLevel":"Read","resourceTypes":[{"name":"ManagedNotificationEvent","required":true}]},"GetNotificationConfiguration":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to get a NotificationConfiguration","accessLevel":"Read","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"GetNotificationEvent":{"conditionKeys":[],"resources":[{"name":"NotificationEvent"}],"description":"Grants permission to get a NotificationEvent","accessLevel":"Read","resourceTypes":[{"name":"NotificationEvent","required":true}]},"GetNotificationsAccessForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to read Service Trust for AWS User Notifications","accessLevel":"Read","resourceTypes":[]},"ListChannels":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to list Channels by NotificationConfiguration","accessLevel":"List","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"ListEventRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list EventRules","accessLevel":"List","resourceTypes":[]},"ListManagedNotificationChannelAssociations":{"conditionKeys":[],"resources":[{"name":"ManagedNotificationConfiguration"}],"description":"Grants permission to list Account contacts and Channels associated with a Managed Notification Configuration","accessLevel":"List","resourceTypes":[{"name":"ManagedNotificationConfiguration","required":true}]},"ListManagedNotificationChildEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Managed Notification Child Events","accessLevel":"List","resourceTypes":[]},"ListManagedNotificationConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Managed Notification Configurations","accessLevel":"List","resourceTypes":[]},"ListManagedNotificationEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list Managed Notification Events","accessLevel":"List","resourceTypes":[]},"ListMemberAccounts":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to list Member Accounts for a Notification Configuration","accessLevel":"List","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"ListNotificationConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list NotificationConfigurations","accessLevel":"List","resourceTypes":[]},"ListNotificationEvents":{"conditionKeys":[],"resources":[],"description":"Grants permission to list NotificationEvents","accessLevel":"List","resourceTypes":[]},"ListNotificationHubs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list NotificationHubs","accessLevel":"List","resourceTypes":[]},"ListOrganizationalUnits":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to list Organizational Units for a Notification Configuration","accessLevel":"List","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to get tags for a resource","accessLevel":"List","resourceTypes":[]},"PutFeatureOptInStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the opt-in status of an AWS User Notification Service feature","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"RegisterNotificationHub":{"conditionKeys":[],"resources":[],"description":"Grants permission to register a NotificationHub","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"NotificationConfiguration","required":true}]},"UpdateEventRule":{"conditionKeys":[],"resources":[{"name":"EventRule"}],"description":"Grants permission to update an EventRule","accessLevel":"Write","resourceTypes":[{"name":"EventRule","required":true}]},"UpdateNotificationConfiguration":{"conditionKeys":[],"resources":[{"name":"NotificationConfiguration"}],"description":"Grants permission to update a NotificationConfiguration","accessLevel":"Write","resourceTypes":[{"name":"NotificationConfiguration","required":true}]}},"resources":[{"name":"EventRule","arnFormats":["arn:${Partition}:notifications::${Account}:configuration/${NotificationConfigurationId}/rule/${EventRuleId}"],"conditionKeys":[]},{"name":"ManagedNotificationChildEvent","arnFormats":["arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/${Category}/sub-category/${Subcategory}/event/${NotificationEventId}/child-event/${NotificationChildEventId}"],"conditionKeys":[]},{"name":"ManagedNotificationConfiguration","arnFormats":["arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/${Category}/sub-category/${Subcategory}"],"conditionKeys":[]},{"name":"ManagedNotificationEvent","arnFormats":["arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/${Category}/sub-category/${Subcategory}/event/${NotificationEventId}"],"conditionKeys":[]},{"name":"NotificationConfiguration","arnFormats":["arn:${Partition}:notifications::${Account}:configuration/${NotificationConfigurationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"NotificationEvent","arnFormats":["arn:${Partition}:notifications:${Region}:${Account}:configuration/${NotificationConfigurationId}/event/${NotificationEventId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}

package/src/data/servicereference/services/nova-act.json

@@ -0,0 +1 @@
+{"name":"nova-act","actions":{"CreateAct":{"conditionKeys":[],"resources":[{"name":"workflow-definition"},{"name":"workflow-run"}],"description":"Grants permission to create a new AI task (act) within a session that can interact with tools and perform specific actions","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true},{"name":"workflow-run","required":true}]},"CreateSession":{"conditionKeys":[],"resources":[{"name":"workflow-definition"},{"name":"workflow-run"}],"description":"Grants permission to create a new session context within a workflow run to manage conversation state and acts","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true},{"name":"workflow-run","required":true}]},"CreateWorkflowDefinition":{"conditionKeys":[],"resources":[{"name":"workflow-definition"}],"description":"Grants permission to create a new workflow definition template that can be used to execute multiple workflow runs","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true}]},"CreateWorkflowRun":{"conditionKeys":[],"resources":[{"name":"workflow-definition"}],"description":"Grants permission to create a new execution instance of a workflow definition with specified parameters","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true}]},"DeleteWorkflowDefinition":{"conditionKeys":[],"resources":[{"name":"workflow-definition"}],"description":"Grants permission to delete a workflow definition and all associated resources","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true}]},"DeleteWorkflowRun":{"conditionKeys":[],"resources":[{"name":"workflow-definition"},{"name":"workflow-run"}],"description":"Grants permission to terminate and clean up a workflow run, stopping all associated acts and sessions","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true},{"name":"workflow-run","required":true}]},"GetWorkflowDefinition":{"conditionKeys":[],"resources":[{"name":"workflow-definition"}],"description":"Grants permission to retrieve details and configuration of a specific workflow definition","accessLevel":"Read","resourceTypes":[{"name":"workflow-definition","required":true}]},"GetWorkflowRun":{"conditionKeys":[],"resources":[{"name":"workflow-definition"},{"name":"workflow-run"}],"description":"Grants permission to retrieve the current state, configuration, and execution details of a workflow run","accessLevel":"Read","resourceTypes":[{"name":"workflow-definition","required":true},{"name":"workflow-run","required":true}]},"InvokeActStep":{"conditionKeys":[],"resources":[{"name":"workflow-definition"},{"name":"workflow-run"}],"description":"Grants permission to execute the next step of an act, processing tool call results and returning new tool calls if needed","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true},{"name":"workflow-run","required":true}]},"ListActs":{"conditionKeys":[],"resources":[{"name":"workflow-definition"}],"description":"Grants permission to list all acts within a specific session with their current status and execution details","accessLevel":"Read","resourceTypes":[{"name":"workflow-definition","required":true}]},"ListModels":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all available AI models that can be used for workflow execution, including their status and compatibility information","accessLevel":"Read","resourceTypes":[]},"ListSessions":{"conditionKeys":[],"resources":[{"name":"workflow-definition"},{"name":"workflow-run"}],"description":"Grants permission to list all sessions within a specific workflow run","accessLevel":"Read","resourceTypes":[{"name":"workflow-definition","required":true},{"name":"workflow-run","required":true}]},"ListWorkflowDefinitions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all workflow definitions in your account with optional filtering and pagination","accessLevel":"List","resourceTypes":[]},"ListWorkflowRuns":{"conditionKeys":[],"resources":[{"name":"workflow-definition"}],"description":"Grants permission to list all workflow runs for a specific workflow definition with optional filtering and pagination","accessLevel":"List","resourceTypes":[{"name":"workflow-definition","required":true}]},"UpdateAct":{"conditionKeys":[],"resources":[{"name":"workflow-definition"},{"name":"workflow-run"}],"description":"Grants permission to update an existing act's configuration, status, or error information","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true},{"name":"workflow-run","required":true}]},"UpdateWorkflowRun":{"conditionKeys":[],"resources":[{"name":"workflow-definition"},{"name":"workflow-run"}],"description":"Grants permission to update the configuration or state of an active workflow run","accessLevel":"Write","resourceTypes":[{"name":"workflow-definition","required":true},{"name":"workflow-run","required":true}]}},"resources":[{"name":"workflow-definition","arnFormats":["arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionName}"],"conditionKeys":[]},{"name":"workflow-run","arnFormats":["arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionName}/workflow-run/${WorkflowRunId}"],"conditionKeys":[]}],"conditionKeys":{}}

package/src/data/servicereference/services/oam.json

@@ -0,0 +1 @@
+{"name":"oam","actions":{"CreateLink":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","oam:ResourceTypes"],"resources":[{"name":"Sink"}],"description":"Grants permission to create a link between a monitoring account and a source account for cross-account monitoring","accessLevel":"Write","resourceTypes":[{"name":"Sink","required":true}],"dependentActions":["oam:TagResource"]},"CreateSink":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a sink in an account so that it can be used as a monitoring account for cross-account monitoring","accessLevel":"Write","resourceTypes":[],"dependentActions":["oam:TagResource"]},"DeleteLink":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Link"}],"description":"Grants permission to delete a link between a monitoring account and a source account for cross-account monitoring","accessLevel":"Write","resourceTypes":[{"name":"Link","required":true}]},"DeleteSink":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Sink"}],"description":"Grants permission to delete a cross-account monitoring sink in a monitoring account","accessLevel":"Write","resourceTypes":[{"name":"Sink","required":true}]},"GetLink":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Link"}],"description":"Grants permission to retrieve complete information about one cross-account monitoring link","accessLevel":"Read","resourceTypes":[{"name":"Link","required":true}]},"GetSink":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Sink"}],"description":"Grants permission to retrieve complete information about one cross-account monitoring sink","accessLevel":"Read","resourceTypes":[{"name":"Sink","required":true}]},"GetSinkPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Sink"}],"description":"Grants permission to retrieve information for the IAM policy for a cross-account monitoring sink","accessLevel":"Read","resourceTypes":[{"name":"Sink","required":true}]},"ListAttachedLinks":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Sink"}],"description":"Grants permission to retrieve a list of links that are linked for a cross-account monitoring sink","accessLevel":"Read","resourceTypes":[{"name":"Sink","required":true}]},"ListLinks":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the ARNs of cross-account monitoring links in this account","accessLevel":"Read","resourceTypes":[]},"ListSinks":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the ARNs of cross-account monitoring sinks in this account","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"Link"},{"name":"Sink"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"Link","required":false},{"name":"Sink","required":false}]},"PutSinkPolicy":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Sink"}],"description":"Grants permission to create or update the IAM policy for a cross-account monitoring sink","accessLevel":"Write","resourceTypes":[{"name":"Sink","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Link"},{"name":"Sink"}],"description":"Grants permission to tag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Link","required":false},{"name":"Sink","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"Link"},{"name":"Sink"}],"description":"Grants permission to untag a resource","accessLevel":"Tagging","resourceTypes":[{"name":"Link","required":false},{"name":"Sink","required":false}]},"UpdateLink":{"conditionKeys":["aws:ResourceTag/${TagKey}","oam:ResourceTypes"],"resources":[{"name":"Link"}],"description":"Grants permission to update an existing link between a monitoring account and a source account","accessLevel":"Write","resourceTypes":[{"name":"Link","required":true}]}},"resources":[{"name":"Link","arnFormats":["arn:${Partition}:oam:${Region}:${Account}:link/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Sink","arnFormats":["arn:${Partition}:oam:${Region}:${Account}:sink/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"oam:ResourceTypes":{"types":["ArrayOfString"],"description":"Filters access by the presence of resource types in the request"}}}

package/src/data/servicereference/services/observabilityadmin.json

@@ -0,0 +1 @@
+{"name":"observabilityadmin","actions":{"CreateCentralizationRuleForOrganization":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","observabilityadmin:CentralizationBackupRegion","observabilityadmin:CentralizationDestinationRegion","observabilityadmin:CentralizationSourceRegions"],"resources":[{"name":"organization-centralization-rule"}],"description":"Grants permission to create a new organization centralization rule with the specified name for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization-centralization-rule","required":true}]},"CreateS3TableIntegration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"s3tableintegration"}],"description":"Grants permission to create a new s3 table integration with the specified configuration","accessLevel":"Write","resourceTypes":[{"name":"s3tableintegration","required":true}]},"CreateTelemetryPipeline":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","observabilityadmin:SourceType"],"resources":[{"name":"telemetry-pipeline"}],"description":"Grants permission to create a new telemetry pipeline with the specified name and configuration","accessLevel":"Write","resourceTypes":[{"name":"telemetry-pipeline","required":true}]},"CreateTelemetryRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"telemetry-rule"}],"description":"Grants permission to create a new telemetry rule with the specified name for the account","accessLevel":"Write","resourceTypes":[{"name":"telemetry-rule","required":true}]},"CreateTelemetryRuleForOrganization":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"organization-telemetry-rule"}],"description":"Grants permission to create a new organization telemetry rule with the specified name for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization-telemetry-rule","required":true}]},"DeleteCentralizationRuleForOrganization":{"conditionKeys":[],"resources":[{"name":"organization-centralization-rule"}],"description":"Grants permission to delete an organization centralization rule with the specified name for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization-centralization-rule","required":true}]},"DeleteS3TableIntegration":{"conditionKeys":[],"resources":[{"name":"s3tableintegration"}],"description":"Grants permission to delete the s3 table integration with the specified arn","accessLevel":"Write","resourceTypes":[{"name":"s3tableintegration","required":true}]},"DeleteTelemetryPipeline":{"conditionKeys":[],"resources":[{"name":"telemetry-pipeline"}],"description":"Grants permission to delete the telemetry pipeline with the specified arn","accessLevel":"Write","resourceTypes":[{"name":"telemetry-pipeline","required":true}]},"DeleteTelemetryRule":{"conditionKeys":[],"resources":[{"name":"telemetry-rule"}],"description":"Grants permission to delete a telemetry rule with the specified name for the account","accessLevel":"Write","resourceTypes":[{"name":"telemetry-rule","required":true}]},"DeleteTelemetryRuleForOrganization":{"conditionKeys":[],"resources":[{"name":"organization-telemetry-rule"}],"description":"Grants permission to delete an organization telemetry rule with the specified name for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization-telemetry-rule","required":true}]},"GetCentralizationRuleForOrganization":{"conditionKeys":[],"resources":[{"name":"organization-centralization-rule"}],"description":"Grants permission to retrieve the specified organization centralization rule for the organization","accessLevel":"Read","resourceTypes":[{"name":"organization-centralization-rule","required":true}]},"GetS3TableIntegration":{"conditionKeys":[],"resources":[{"name":"s3tableintegration"}],"description":"Grants permission to retrieve the specified s3 table integration for the account","accessLevel":"Read","resourceTypes":[{"name":"s3tableintegration","required":true}]},"GetTelemetryEnrichmentStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the status of the Resource tags for telemetry feature for the account","accessLevel":"Read","resourceTypes":[]},"GetTelemetryEvaluationStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the Telemetry Config feature status for the account","accessLevel":"Read","resourceTypes":[]},"GetTelemetryEvaluationStatusForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the Telemetry Config feature status for the organization","accessLevel":"Read","resourceTypes":[]},"GetTelemetryPipeline":{"conditionKeys":[],"resources":[{"name":"telemetry-pipeline"}],"description":"Grants permission to Get the telemetry pipeline with the specified name or arn","accessLevel":"Read","resourceTypes":[{"name":"telemetry-pipeline","required":true}]},"GetTelemetryRule":{"conditionKeys":[],"resources":[{"name":"telemetry-rule"}],"description":"Grants permission to retrieve the specified telemetry rule for the account","accessLevel":"Read","resourceTypes":[{"name":"telemetry-rule","required":true}]},"GetTelemetryRuleForOrganization":{"conditionKeys":[],"resources":[{"name":"organization-telemetry-rule"}],"description":"Grants permission to retrieve the specified organization telemetry rule for the organization","accessLevel":"Read","resourceTypes":[{"name":"organization-telemetry-rule","required":true}]},"ListCentralizationRulesForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the centralization rules for the organization","accessLevel":"List","resourceTypes":[]},"ListResourceTelemetry":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve telemetry configurations for resources associated with the account","accessLevel":"Read","resourceTypes":[]},"ListResourceTelemetryForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve telemetry configurations for resources associated with accounts in the organization","accessLevel":"Read","resourceTypes":[]},"ListS3TableIntegrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list s3 table integrations for the account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"organization-centralization-rule"},{"name":"organization-telemetry-rule"},{"name":"s3tableintegration"},{"name":"telemetry-pipeline"},{"name":"telemetry-rule"}],"description":"Grants permission to list the tags for the specified resource","accessLevel":"List","resourceTypes":[{"name":"organization-centralization-rule","required":false},{"name":"organization-telemetry-rule","required":false},{"name":"s3tableintegration","required":false},{"name":"telemetry-pipeline","required":false},{"name":"telemetry-rule","required":false}]},"ListTelemetryPipelines":{"conditionKeys":[],"resources":[],"description":"Grants permission to List telemetry pipelines for the account","accessLevel":"List","resourceTypes":[]},"ListTelemetryRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the telemetry rules for the account","accessLevel":"List","resourceTypes":[]},"ListTelemetryRulesForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the telemetry rules for the organization","accessLevel":"List","resourceTypes":[]},"StartTelemetryEnrichment":{"conditionKeys":[],"resources":[],"description":"Grants permission to enable the Resource tags for telemetry feature for the account","accessLevel":"Write","resourceTypes":[]},"StartTelemetryEvaluation":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the Telemetry Config feature for the account","accessLevel":"Write","resourceTypes":[]},"StartTelemetryEvaluationForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to start the Telemetry Config feature for the organization","accessLevel":"Write","resourceTypes":[]},"StopTelemetryEnrichment":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable the Resource tags for telemetry feature for the account","accessLevel":"Write","resourceTypes":[]},"StopTelemetryEvaluation":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop the Telemetry Config feature for the account","accessLevel":"Write","resourceTypes":[]},"StopTelemetryEvaluationForOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to stop the Telemetry Config feature for the organization","accessLevel":"Write","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"organization-centralization-rule"},{"name":"organization-telemetry-rule"},{"name":"s3tableintegration"},{"name":"telemetry-pipeline"},{"name":"telemetry-rule"}],"description":"Grants permission to add or update the specified tags for the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"organization-centralization-rule","required":false},{"name":"organization-telemetry-rule","required":false},{"name":"s3tableintegration","required":false},{"name":"telemetry-pipeline","required":false},{"name":"telemetry-rule","required":false}]},"TestTelemetryPipeline":{"conditionKeys":[],"resources":[],"description":"Grants permission to Test a telemetry pipeline configuration with sample data","accessLevel":"Read","resourceTypes":[]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"organization-centralization-rule"},{"name":"organization-telemetry-rule"},{"name":"s3tableintegration"},{"name":"telemetry-pipeline"},{"name":"telemetry-rule"}],"description":"Grants permission to remove the specified tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"organization-centralization-rule","required":false},{"name":"organization-telemetry-rule","required":false},{"name":"s3tableintegration","required":false},{"name":"telemetry-pipeline","required":false},{"name":"telemetry-rule","required":false}]},"UpdateCentralizationRuleForOrganization":{"conditionKeys":["observabilityadmin:CentralizationBackupRegion","observabilityadmin:CentralizationDestinationRegion","observabilityadmin:CentralizationSourceRegions"],"resources":[{"name":"organization-centralization-rule"}],"description":"Grants permission to update the specified centralization rule for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization-centralization-rule","required":true}]},"UpdateTelemetryPipeline":{"conditionKeys":[],"resources":[{"name":"telemetry-pipeline"}],"description":"Grants permission to Update the telemetry pipeline with the specified arn","accessLevel":"Write","resourceTypes":[{"name":"telemetry-pipeline","required":true}]},"UpdateTelemetryRule":{"conditionKeys":[],"resources":[{"name":"telemetry-rule"}],"description":"Grants permission to update the specified telemetry rule for the account","accessLevel":"Write","resourceTypes":[{"name":"telemetry-rule","required":true}]},"UpdateTelemetryRuleForOrganization":{"conditionKeys":[],"resources":[{"name":"organization-telemetry-rule"}],"description":"Grants permission to update the specified telemetry rule for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization-telemetry-rule","required":true}]},"ValidateTelemetryPipelineConfiguration":{"conditionKeys":[],"resources":[],"description":"Grants permission to Validate a telemetry pipeline configuration","accessLevel":"Read","resourceTypes":[]}},"resources":[{"name":"organization-centralization-rule","arnFormats":["arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/${CentralizationRuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"organization-telemetry-rule","arnFormats":["arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/${TelemetryRuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"s3tableintegration","arnFormats":["arn:${Partition}:observabilityadmin:${Region}:${Account}:s3tableintegration/${S3TableIntegrationIdentifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"telemetry-pipeline","arnFormats":["arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-pipeline/${TelemetryPipelineIdentifier}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"telemetry-rule","arnFormats":["arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/${TelemetryRuleName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"observabilityadmin:CentralizationBackupRegion":{"types":["String"],"description":"Filters access by the backup region that is passed in the request"},"observabilityadmin:CentralizationDestinationRegion":{"types":["String"],"description":"Filters access by the destination region that is passed in the request"},"observabilityadmin:CentralizationSourceRegions":{"types":["ArrayOfString"],"description":"Filters access by the source regions that are passed in the request"},"observabilityadmin:SourceType":{"types":["String"],"description":"Filters access by the source type that is passed in the request"}}}

package/src/data/servicereference/services/odb.json

@@ -0,0 +1 @@
+{"name":"odb","actions":{"AcceptMarketplaceRegistration":{"conditionKeys":[],"resources":[],"description":"Grants permission to register the Amazon Web Services Marketplace token for your Amazon Web Services account to activate your Oracle Database@Amazon Web Services subscription","accessLevel":"Write","resourceTypes":[]},"CreateCloudAutonomousVmCluster":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cloud-exadata-infrastructure"},{"name":"odb-network"}],"description":"Grants permission to create a new Autonomous VM cluster in the specified Exadata infrastructure","accessLevel":"Write","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true},{"name":"odb-network","required":true}]},"CreateCloudExadataInfrastructure":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an Exadata infrastructure","accessLevel":"Write","resourceTypes":[]},"CreateCloudVmCluster":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cloud-exadata-infrastructure"},{"name":"odb-network"}],"description":"Grants permission to create a VM cluster on the specified Exadata infrastructure","accessLevel":"Write","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true},{"name":"odb-network","required":true}]},"CreateDbNode":{"conditionKeys":[],"resources":[{"name":"db-node"}],"description":"Grants permission to create a DB Node","accessLevel":"Write","resourceTypes":[{"name":"db-node","required":true}],"permissionOnly":true},"CreateGrantShare":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an ODB Grant Share","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"CreateOdbNetwork":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an ODB network","accessLevel":"Write","resourceTypes":[]},"CreateOdbPeeringConnection":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"odb-network"}],"description":"Grants permission to create an ODB Peering Connection","accessLevel":"Write","resourceTypes":[{"name":"odb-network","required":true}]},"CreateOutboundIntegration":{"conditionKeys":[],"resources":[{"name":"cloud-autonomous-vm-cluster"},{"name":"cloud-vm-cluster"}],"description":"Grants permission to create an Outbound Integration","accessLevel":"Write","resourceTypes":[{"name":"cloud-autonomous-vm-cluster","required":true},{"name":"cloud-vm-cluster","required":true}],"permissionOnly":true},"DeleteCloudAutonomousVmCluster":{"conditionKeys":[],"resources":[{"name":"cloud-autonomous-vm-cluster"}],"description":"Grants permission to Deletes an Autonomous VM cluster","accessLevel":"Write","resourceTypes":[{"name":"cloud-autonomous-vm-cluster","required":true}]},"DeleteCloudExadataInfrastructure":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"}],"description":"Grants permission to delete a specified Exadata infrastructure. Before you use this operation, make sure to delete all of the VM clusters that are hosted on this Exadata infrastructure","accessLevel":"Write","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true}]},"DeleteCloudVmCluster":{"conditionKeys":[],"resources":[{"name":"cloud-vm-cluster"}],"description":"Grants permission to delete a specified VM cluster","accessLevel":"Write","resourceTypes":[{"name":"cloud-vm-cluster","required":true}]},"DeleteDbNode":{"conditionKeys":[],"resources":[{"name":"db-node"}],"description":"Grants permission to delete a DB Node","accessLevel":"Write","resourceTypes":[{"name":"db-node","required":true}],"permissionOnly":true},"DeleteGrantShare":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an ODB Grant Share","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"DeleteOdbNetwork":{"conditionKeys":[],"resources":[{"name":"odb-network"}],"description":"Grants permission to delete the specified ODB network","accessLevel":"Write","resourceTypes":[{"name":"odb-network","required":true}]},"DeleteOdbPeeringConnection":{"conditionKeys":[],"resources":[{"name":"odb-peering-connection"}],"description":"Grants permission to delete the specified ODB Peering Connection. When you delete an ODB peering connection, the underlying VPC peering connection is also deleted","accessLevel":"Write","resourceTypes":[{"name":"odb-peering-connection","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"},{"name":"odb-network"}],"description":"Grants permission to delete a resource policy","accessLevel":"Write","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true},{"name":"odb-network","required":true}],"permissionOnly":true},"GetCloudAutonomousVmCluster":{"conditionKeys":[],"resources":[{"name":"cloud-autonomous-vm-cluster"}],"description":"Grants permission to get information about a specific Autonomous VM cluster","accessLevel":"Read","resourceTypes":[{"name":"cloud-autonomous-vm-cluster","required":true}]},"GetCloudExadataInfrastructure":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"}],"description":"Grants permission to get information about the specified Exadata infrastructure","accessLevel":"Read","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true}]},"GetCloudExadataInfrastructureUnallocatedResources":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"}],"description":"Grants permission to retrieve information about unallocated resources in a specified Cloud Exadata Infrastructure","accessLevel":"Read","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true}]},"GetCloudVmCluster":{"conditionKeys":[],"resources":[{"name":"cloud-vm-cluster"}],"description":"Grants permission to get information about the specified VM cluster","accessLevel":"Read","resourceTypes":[{"name":"cloud-vm-cluster","required":true}]},"GetDbNode":{"conditionKeys":[],"resources":[{"name":"cloud-vm-cluster"},{"name":"db-node"}],"description":"Grants permission to get information about the specified DB node","accessLevel":"Read","resourceTypes":[{"name":"cloud-vm-cluster","required":true},{"name":"db-node","required":true}]},"GetDbServer":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"}],"description":"Grants permission to get information about the specified database server","accessLevel":"Read","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true}]},"GetOciOnboardingStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the tenancy activation link and onboarding status for your Amazon Web Services account","accessLevel":"Read","resourceTypes":[]},"GetOdbNetwork":{"conditionKeys":[],"resources":[{"name":"odb-network"}],"description":"Grants permission to get information about the specified ODB network","accessLevel":"Read","resourceTypes":[{"name":"odb-network","required":true}]},"GetOdbPeeringConnection":{"conditionKeys":[],"resources":[{"name":"odb-peering-connection"}],"description":"Grants permission to get information about the specified ODB Peering connection","accessLevel":"Read","resourceTypes":[{"name":"odb-peering-connection","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"},{"name":"odb-network"}],"description":"Grants permission to get a resource policy","accessLevel":"Read","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true},{"name":"odb-network","required":true}],"permissionOnly":true},"InitializeService":{"conditionKeys":[],"resources":[],"description":"Grants permission to initialize the ODB service for the first time in an account","accessLevel":"Write","resourceTypes":[]},"ListAutonomousVirtualMachines":{"conditionKeys":[],"resources":[{"name":"cloud-autonomous-vm-cluster"}],"description":"Grants permission to list all Autonomous VMs in an Autonomous VM cluster","accessLevel":"Read","resourceTypes":[{"name":"cloud-autonomous-vm-cluster","required":false}]},"ListCloudAutonomousVmClusters":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"}],"description":"Grants permission to list all Autonomous VM clusters in a specified Cloud Exadata infrastructure","accessLevel":"List","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":false}]},"ListCloudExadataInfrastructures":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about the Exadata infrastructures owned by your Amazon Web Services account","accessLevel":"List","resourceTypes":[]},"ListCloudVmClusters":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"}],"description":"Grants permission to list information about the VM clusters owned by your Amazon Web Services account or only the ones on the specified Exadata infrastructure","accessLevel":"List","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":false}]},"ListDbNodes":{"conditionKeys":[],"resources":[{"name":"cloud-vm-cluster"}],"description":"Grants permission to list information about the DB nodes for the specified VM cluster","accessLevel":"List","resourceTypes":[{"name":"cloud-vm-cluster","required":true}]},"ListDbServers":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"}],"description":"Grants permission to list information about the database servers that belong to the specified Exadata infrastructure","accessLevel":"Read","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true}]},"ListDbSystemShapes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about the shapes that are available for an Exadata infrastructure","accessLevel":"Read","resourceTypes":[]},"ListGiVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about Oracle Grid Infrastructure (GI) software versions that are available for a VM cluster for the specified shape","accessLevel":"Read","resourceTypes":[]},"ListOdbNetworks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about the ODB networks owned by your Amazon Web Services account","accessLevel":"List","resourceTypes":[]},"ListOdbPeeringConnections":{"conditionKeys":[],"resources":[{"name":"odb-network"}],"description":"Grants permission to list all ODB peering connections or those associated with a specific ODB network","accessLevel":"List","resourceTypes":[{"name":"odb-network","required":false}]},"ListSystemVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list information about the system versions that are available for a VM cluster for the specified giVersion and shape","accessLevel":"Read","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"cloud-autonomous-vm-cluster"},{"name":"cloud-exadata-infrastructure"},{"name":"cloud-vm-cluster"},{"name":"db-node"},{"name":"odb-network"},{"name":"odb-peering-connection"}],"description":"Grants permission to list information about the tags applied to this resource","accessLevel":"Read","resourceTypes":[{"name":"cloud-autonomous-vm-cluster","required":false},{"name":"cloud-exadata-infrastructure","required":false},{"name":"cloud-vm-cluster","required":false},{"name":"db-node","required":false},{"name":"odb-network","required":false},{"name":"odb-peering-connection","required":false}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"},{"name":"odb-network"}],"description":"Grants permission to update a resource policy","accessLevel":"Write","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true},{"name":"odb-network","required":true}],"permissionOnly":true},"RebootDbNode":{"conditionKeys":[],"resources":[{"name":"cloud-vm-cluster"},{"name":"db-node"}],"description":"Grants permission to reboot the specified DB node in a VM cluster","accessLevel":"Write","resourceTypes":[{"name":"cloud-vm-cluster","required":true},{"name":"db-node","required":true}]},"StartDbNode":{"conditionKeys":[],"resources":[{"name":"cloud-vm-cluster"},{"name":"db-node"}],"description":"Grants permission to start the specified DB node in a VM cluster","accessLevel":"Write","resourceTypes":[{"name":"cloud-vm-cluster","required":true},{"name":"db-node","required":true}]},"StopDbNode":{"conditionKeys":[],"resources":[{"name":"cloud-vm-cluster"}],"description":"Grants permission to stop the specified DB node in a VM cluster","accessLevel":"Write","resourceTypes":[{"name":"cloud-vm-cluster","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cloud-autonomous-vm-cluster"},{"name":"cloud-exadata-infrastructure"},{"name":"cloud-vm-cluster"},{"name":"db-node"},{"name":"odb-network"},{"name":"odb-peering-connection"}],"description":"Grants permission to apply tags to the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"cloud-autonomous-vm-cluster","required":false},{"name":"cloud-exadata-infrastructure","required":false},{"name":"cloud-vm-cluster","required":false},{"name":"db-node","required":false},{"name":"odb-network","required":false},{"name":"odb-peering-connection","required":false}]},"UntagResource":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"cloud-autonomous-vm-cluster"},{"name":"cloud-exadata-infrastructure"},{"name":"cloud-vm-cluster"},{"name":"db-node"},{"name":"odb-network"},{"name":"odb-peering-connection"}],"description":"Grants permission to remove tags from the specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"cloud-autonomous-vm-cluster","required":false},{"name":"cloud-exadata-infrastructure","required":false},{"name":"cloud-vm-cluster","required":false},{"name":"db-node","required":false},{"name":"odb-network","required":false},{"name":"odb-peering-connection","required":false}]},"UpdateCloudExadataInfrastructure":{"conditionKeys":[],"resources":[{"name":"cloud-exadata-infrastructure"}],"description":"Grants permission to update the properties of an Exadata infrastructure resource","accessLevel":"Write","resourceTypes":[{"name":"cloud-exadata-infrastructure","required":true}]},"UpdateGrantShare":{"conditionKeys":[],"resources":[],"description":"Grants permission to update an ODB Grant Share","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateOdbNetwork":{"conditionKeys":[],"resources":[{"name":"odb-network"}],"description":"Grants permission to update properties of a specified ODB network","accessLevel":"Write","resourceTypes":[{"name":"odb-network","required":true}]},"UpdateOdbPeeringConnection":{"conditionKeys":[],"resources":[{"name":"odb-peering-connection"}],"description":"Grants permission to update properties of a specified ODB Peering Connection","accessLevel":"Write","resourceTypes":[{"name":"odb-peering-connection","required":true}]},"UpdateOutboundIntegration":{"conditionKeys":[],"resources":[{"name":"cloud-autonomous-vm-cluster"},{"name":"cloud-vm-cluster"}],"description":"Grants permission to update an Outbound Integration","accessLevel":"Write","resourceTypes":[{"name":"cloud-autonomous-vm-cluster","required":true},{"name":"cloud-vm-cluster","required":true}],"permissionOnly":true}},"resources":[{"name":"cloud-autonomous-vm-cluster","arnFormats":["arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/${CloudAutonomousVmClusterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"cloud-exadata-infrastructure","arnFormats":["arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/${CloudExadataInfrastructureId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"cloud-vm-cluster","arnFormats":["arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/${CloudVmClusterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"db-node","arnFormats":["arn:${Partition}:odb:${Region}:${Account}:db-node/${DbNodeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"odb-network","arnFormats":["arn:${Partition}:odb:${Region}:${Account}:odb-network/${OdbNetworkId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"odb-peering-connection","arnFormats":["arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/${OdbPeeringConnectionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair that is allowed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key and value pair of a resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by a list of tag keys that are allowed in the request"}}}